Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer
File:                     49F08990C69AD6EA89454E7CF1EF5A283511DBA2.cer (raw, json)
Hash identifier:          G5pdz5bCAFbikDVe6QjI/JvALIDSI1gnRFf1vzVy9dA=
Subject key identifier:   49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12C8D09A3D4F70E2C522EC5918BB6BF8F9652390
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 12:31:06 +0000
Certificate not after:    Tue 06 Aug 2024 12:36:06 +0000
Subordinate resources:    AS: 52752
                          IP: 177.155.160.0/20
                          IP: 189.76.64.0/20
                          IP: 2804:11e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:d0:9a:3d:4f:70:e2:c5:22:ec:59:18:bb:6b:f8:f9:65:23:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 12:31:06 2023 GMT
            Not After : Aug  6 12:36:06 2024 GMT
        Subject: CN=49F08990C69AD6EA89454E7CF1EF5A283511DBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:c0:de:8d:50:ce:d9:ba:a0:d2:65:87:c2:
                    15:a2:a5:05:4d:18:f7:38:48:94:b1:d0:ce:fc:4b:
                    2a:4b:7b:a2:ea:a8:36:17:ff:60:87:d1:4a:9d:e7:
                    5c:fd:f0:74:3d:26:4a:a5:b3:55:f3:72:d3:ee:e5:
                    b7:9c:20:05:8c:d2:47:c4:0d:13:57:66:27:ec:f9:
                    46:c2:fb:e9:e4:1b:7d:29:e3:9e:5a:ae:aa:7c:12:
                    7b:75:ea:10:64:37:2c:1b:0c:14:d9:96:fc:78:be:
                    1d:c1:b2:fb:63:fa:b8:00:61:bf:65:ac:2b:90:57:
                    66:8a:2e:37:b3:b7:fa:8c:38:3f:65:43:b5:44:13:
                    d5:e7:26:b2:bb:3c:c6:96:f6:71:90:35:1a:89:30:
                    2d:54:dd:04:b9:d4:d6:95:79:a1:01:96:9e:56:c9:
                    88:12:bb:d1:01:c0:08:1c:de:a9:9f:7b:26:4d:bc:
                    f1:9d:09:ed:6b:af:de:1f:ce:93:24:48:e3:6a:01:
                    80:a8:83:41:71:19:64:e7:a2:4f:3d:68:84:29:41:
                    6a:ca:b8:6b:a1:c0:1c:86:3f:f1:f7:c0:03:85:d4:
                    05:0a:af:dc:97:1e:df:2d:a0:12:ca:a2:61:e2:9f:
                    f6:12:18:51:84:c0:72:85:7d:c4:d2:b7:df:98:db:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:F0:89:90:C6:9A:D6:EA:89:45:4E:7C:F1:EF:5A:28:35:11:DB:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/49F08990C69AD6EA89454E7CF1EF5A283511DBA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.160.0/20
                  189.76.64.0/20
                IPv6:
                  2804:11e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52752

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:eb:37:e7:9b:4d:5f:7d:58:f1:f7:09:85:bb:2a:03:26:
         5c:23:9f:e7:dd:ac:85:fb:3e:65:c0:cd:a8:e2:48:12:42:bd:
         c4:a9:7d:56:1d:c1:0e:c8:d0:08:2a:1a:d0:f2:5c:eb:5d:5a:
         0b:c9:77:8d:3d:6e:87:04:5f:d3:d5:12:03:c4:f9:2b:26:2e:
         f8:fe:a0:25:b3:e1:90:51:d4:38:25:49:5a:80:62:10:9d:dd:
         57:4d:59:9a:9d:fa:1f:3a:3d:23:c3:cf:96:65:3e:37:9d:68:
         cd:38:72:f1:1f:30:a5:e4:d9:25:fc:5d:fe:b0:d2:ee:4e:a9:
         30:6c:e9:36:0a:14:ac:38:27:4b:d2:a9:f9:80:ea:df:ef:84:
         28:a5:0e:cf:cc:87:1a:42:e4:2b:9e:fa:f1:d3:8b:9e:42:1a:
         94:90:8d:16:6b:05:6a:7d:1c:4f:93:98:c5:ca:59:94:f0:69:
         0d:bf:45:6b:07:36:30:02:5a:ec:ca:98:aa:17:4d:67:01:90:
         0b:26:5f:90:f2:ca:c2:49:1e:54:37:42:10:8a:b4:34:8d:2c:
         7c:a5:95:ec:3b:63:c4:61:b0:66:05:92:a2:79:2d:8a:09:eb:
         ac:c1:7b:6e:51:11:69:af:af:ef:8e:e5:6d:18:29:df:2c:7e:
         9c:5e:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org